Separation kernel with memory allocation, remote procedure call and exception handling mechanisms

Abstract

A computer-implemented system ( 90 ) is provided that supports a high degree of separation between processing elements. The computer-implemented system ( 90 ) comprises a plurality of cells ( 92 ) residing on the computer-implemented system, where each cell ( 92 ) includes a domain of execution ( 94 ) and at least one processing element ( 96 ); a separation specification ( 99 ) that governs communication between the processing elements ( 96 ); and a kernel ( 98 ) of an operating system that facilitates execution of the processing elements ( 96 ) and administers the communication between the processing elements ( 96 ) in accordance with the separation specification ( 99 ), such that one processing element ( 96 ) can influence the operation of another processing element ( 96 ) only as set forth by the separation specification ( 99 ). In particular, the separation specification provides memory allocation, remote procedure calls and exception handling mechanisms.

1 . A method for handling an exception condition incurred by a strand of a plurality of strands, comprising the steps of:
 designating a maximum exception count for each of the plurality of strands; and   tracking a number of exception conditions incurred by each of the plurality of strands; and   terminating the strand of the plurality of strands when the strand incurs the number of exception conditions that at least equals the maximum exception count designated for the strand.   
   
   
       2 . The method of  claim 1 , further comprising the step of prohibiting an addition of memory for the strand that incurred the exception condition when handling the exception condition of the strand. 
   
   
       3 . The method of  claim 1 , further comprising the step of completing execution of the strand prior to terminating the strand. 
   
   
       4 . The method of  claim 1 , further comprising the step of resuming processing of the strand that incurred the exception condition if the stand incurs the number of exceptions that is less then the maximum exception count designated for the strand. 
   
   
       5 . The method of  claim 1 , wherein the exception condition is a divide by zero condition. 
   
   
       6 . The method of  claim 1 , wherein the exception condition is an invalid address condition. 
   
   
       7 . The method of  claim 1 , wherein terminating the strand occurs when the strand incurs the number of exception conditions that exceeds the maximum exception count designated for the strand.